In some places the engine commands cast users, groups and tenants to their respective entities (only for modifying operations, so ReadOnlyIdentityProvider implementations are not affected). These casts should be removed and we should only work with the interfaces, so that a WritableIdentityProvider can freely implement the interfaces.